用nginx代理tomcat,做https时只需nginx配置证书,443转发到8080即可

配置如下

    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        #root         /usr/share/nginx/html;
        root       /usr/share/tomcat-1.8/webapps;
        try_files       $uri /ROOT/$uri /;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location /nginx {
          alias /usr/share/nginx/html;
          }
          
        location ~\.(css|js|gif|jpg|png|ico|zip|rar|jar|gz|apk|mp3|mp4)$ {
            #/usr/share/tomcat-1.8/webapps/ROOT;
            root       /usr/share/tomcat-1.8/webapps;
            try_files       $uri /ROOT/$uri /;
        }    
        location / {
            proxy_pass http://127.0.0.1:8080;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            #这些用于对服务器推送事件的支持 text/event-stream
            chunked_transfer_encoding off;
            proxy_buffering off;
            proxy_cache off;
            #使用nginx做负载之后的真实IP
            proxy_set_header host $host;
            proxy_set_header X-forwarded-for $proxy_add_x_forwarded_for;
            proxy_set_header X-real-ip $remote_addr;
            }
        }
        
    #注意443后边加ssl
    server {
        listen       443 ssl default_server;
        listen       [::]:443 ssl default_server;
        server_name  _ssl;        
        ssl_certificate     xxx路径
        ssl_certificate_key xxx路径
        #root         /usr/share/nginx/html;
        root       /usr/share/tomcat-1.8/webapps;
        try_files       $uri /ROOT/$uri /;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        location /nginx {
          alias /usr/share/nginx/html;
          }
          
        location ~\.(css|js|gif|jpg|png|ico|zip|rar|jar|gz|apk|mp3|mp4)$ {
            #/usr/share/tomcat-1.8/webapps/ROOT;
            root       /usr/share/tomcat-1.8/webapps;
            try_files       $uri /ROOT/$uri /;
        }    
        location / {
            proxy_pass http://127.0.0.1:8080;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            #这些用于对服务器推送事件的支持 text/event-stream
            chunked_transfer_encoding off;
            proxy_buffering off;
            proxy_cache off;
            #使用nginx做负载之后的真实IP
            proxy_set_header host $host;
            proxy_set_header X-forwarded-for $proxy_add_x_forwarded_for;
            proxy_set_header X-real-ip $remote_addr;
            }
        }